695aff4f85
**Motivations:** - Migrer api-relay vers base de données SQLite (production) - Ajouter authentification API key pour endpoints POST (protection abus) - PersistentNonceCache pour service-login-verify (IndexedDB/localStorage) - Écran paramètres crypto avancés UserWallet - Documenter options non implémentées (Merkle, évolutions api-relay) **Root causes:** - N/A (évolutions + correctifs) **Correctifs:** - N/A **Evolutions:** - api-relay: DatabaseStorageService (SQLite), StorageAdapter (compatibilité), ApiKeyService (génération/validation), auth middleware (Bearer/X-API-Key), endpoints admin (/admin/api-keys), migration script (migrate-to-db.ts), suppression saveToDisk périodique - service-login-verify: PersistentNonceCache (IndexedDB avec fallback localStorage, TTL, cleanup), export dans index - userwallet: CryptoSettingsScreen (hashAlgorithm, jsonCanonizationStrict, ecdhCurve, nonceTtlMs, timestampWindowMs), modifications LoginScreen, LoginForm, CreateIdentityScreen, ImportIdentityScreen, DataExportImportScreen, PairingDisplayScreen, RelaySettingsScreen, ServiceListScreen, MemberSelectionScreen, GlobalActionBar - features: OPTIONS_NON_IMPLENTEES.md (analyse Merkle trees, évolutions api-relay) **Pages affectées:** - api-relay: package.json, index.ts, middleware/auth.ts, services/database.ts, services/storageAdapter.ts, services/apiKeyService.ts, scripts/migrate-to-db.ts - service-login-verify: persistentNonceCache.ts, index.ts, tsconfig.json, dist/ - userwallet: App, CryptoSettingsScreen, LoginScreen, LoginForm, CreateIdentityScreen, ImportIdentityScreen, DataExportImportScreen, PairingDisplayScreen, RelaySettingsScreen, ServiceListScreen, MemberSelectionScreen, GlobalActionBar - features: OPTIONS_NON_IMPLENTEES.md - data: sync-utxos.log
36 lines
1.2 KiB
TypeScript
36 lines
1.2 KiB
TypeScript
import type { NonceCacheLike } from './types.js';
|
|
/**
|
|
* Persistent nonce cache using IndexedDB (browser) or localStorage (fallback).
|
|
* Implements NonceCacheLike interface for use with verifyLoginProof.
|
|
*/
|
|
export declare class PersistentNonceCache implements NonceCacheLike {
|
|
private readonly ttlMs;
|
|
private readonly storageKey;
|
|
private readonly useIndexedDB;
|
|
private db;
|
|
constructor(ttlMs?: number, storageKey?: string);
|
|
/**
|
|
* Initialize IndexedDB if available.
|
|
*/
|
|
init(): Promise<void>;
|
|
/**
|
|
* Check if nonce is valid (not seen within TTL). Records nonce on success.
|
|
* Note: IndexedDB operations are async, but NonceCacheLike interface requires sync.
|
|
* This implementation uses localStorage for synchronous access.
|
|
* For true IndexedDB persistence, consider making the interface async.
|
|
*/
|
|
isValid(nonce: string, timestamp: number): boolean;
|
|
/**
|
|
* Synchronous validation using localStorage (fallback).
|
|
*/
|
|
private isValidSync;
|
|
/**
|
|
* Cleanup expired entries (localStorage).
|
|
*/
|
|
private cleanupSync;
|
|
/**
|
|
* Clear all entries.
|
|
*/
|
|
clear(): void;
|
|
}
|
|
//# sourceMappingURL=persistentNonceCache.d.ts.map
|